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MODULE showaudit 
BEGIN 


' 
. 
leeeeeeeeeeeeeeeteteneteateeeeeeeeeeeeeeeeeReeetereeeKeneeReeeeeeeeeeeeeeeeee 


ie COPYRIGHT | (ot 1978 1980, 1982, 1984 8 

ie DIGITAL T CORPORATION, MAYNARD. MASSACHUSETTS. 
RIGH 3 RESERVE ED. 

OF TWARE 1S FURN SHED UNDER A LICENSE AND MAY 


CE wit 
SI Ton OF T gy Fa! E 


( IDENT 
ADDRESSING_MODE (EXTERNAL = GENERAL)) = 


HA +3 SED AND COPIED 
ERMS OF SUCH LICENSE AND WITH THE 

COPYRIGHT NOTICE. THIS SOF TWA RE OR ANY OTHER 
NOT a | a tee tan OR OTHERWISE MADE AVAILABLE TO ANY 
a sy NO TITLE TO AND OWNERSHIP OF THE SOFTWARE IS HEREBY 


* 
® 
® 
* 
® 
® 
* 
* 
a 
. © 
© 
* 
* 
* 
* 
* 
* 
® 
« 
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se - 


a= 
Be 
“ 
es | 
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1 
1 
1 
1 
1 
1 
1 
1 
1 
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* 
—~ sO0— 


HE INFORMATION IN THIS SOFTWARE IS SUBJECT TO CHANGE WITHOUT NOTICE 
;* CORPORAT ion. NOT BE CONSTRUED AS A COMMITMENT BY DIGITAL EQUIPMENT 


'* DIGITAL ASSUMES NO RESPONSIBILITY FOR THE USE OR RELIABILITY OF ITS 
:@ SOFTWARE ON EQUIPMENT WHICH IS NOT SUPPLIED BY DIGITAL. 


z 
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SORA RORAA AAA AAHEAEREREEHEEEHEEEEAEHERAEEERERERETEREEEAEREEEEES 


i FACILITY: SHOW Command 

| ABSTRACT: 

This module implements the DCL command SHOW AUDIT. 
i ENVIRONMENT: 


' 
! 
' 
t 
' 
' 
VAX/VMS operating system, user and kernel mode 

i AUTHOR: Gerry Smith 29-Jun-1983 
i Modified by: 

i vO3-005 RSHO103 R. Scott Hanna 17-Feb-1984 
: Fix field test 1 problems, comment oyt Jevenes ine code 
a make changes due to new layout of SNSAEVIDEF 

' 

! 

' 

' 

1 

1 

' 

' 


v03-004 RSHO102 Scott Hanna 05-Feb-1984 
Temporarily disabie SHOW AUDIT. 


v03-003 $450190 Gerry Smith ge-Sep- 1985 
ix an index which caused a accvio in file_access display. 


v03-002 GAS0176 Gerry Smith 9-Sep-1983 
Add more comments, remove some kludges, and straighten 
up the displays. 
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; ; ' v03-001 aso171 24-Aug-1983 
; i mailbox ang te faratnal 1/0, add remote and 

. : interact ve login 
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tk ab et i a td a 


14-12 ,-19 
14-Sep-19 
i Include files 


BRARY ‘SYSSLIBRARY: Lie 
EQUIRE *SHRLIBS:JNLDEF INT’; 


cof” cacesa 


LI 
'R 
: 

Define the Linkage for the routine that obtains 


{LINK AGE 
CVIDEV = JSB 
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VAX/VMS common definitions 
Journal definitions 


the device name. 


! Length of putgut buffer, 
Address ¥ dey ou oe buffer 
Format o ce name 
Address of ute 
Length of final name 
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11 1 4 
! ; Table of contents 
1 FORWARD ROUTINE 
4 showSaudit : NOVA ! Main module of SHOW AUDIT 
decode_bits : laters ' Make sense of all the bits 
! get device; ! Get device Jeurnet is going to 


i Library routines 


' 
' 
' 
EXTERNAL TINE 
ghoytur te_line : NOVALUE, 
: focScvt _devnam : CVTIDEV, 
strSappend; 


Mew OONAUE 


! 
! Declare literals defined elsewhere 


‘EXTERNAL LITERAL 
: show$_audreaderr, ! Error getting alarm/journal bits 
: show$_auddeverr; i Error getting journal device 


MEUM “OOO NOMNES WN OOOne 


' 
Declare some cells in the exec 


EXTERNAL 

: atts es SBBLOCK, 

i te ae 
nsa$gr_alarmvec; 


COOSCOSCSOOSCSOOSOOOOCOCOOOOOOOOOOOOOOOOOOO 


i ee a ed ed ed ed 


SPELL LEE 
i kk kk tk 


Se Se Ge Se Se Se Se Ge Se Se Se Ge Se Se Se Se Se Ge Se Se Se Se Se Se Se Ge Se Se Se Se Se Ge Seas 


ce ee ee ee ee ee eed ed 


WN EBERLE EEE 


OONAOULS WOO 
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* 
35 


soon ROUTINE showSaudit : NOVALUE = 
BEGIN 


tee 
Functional description 


This is the routine for the SHOW AUDIT command. It is called 
from the SHOW command processor, and dispiays the class of events 
for which security audits ang alarms are enabled. If there is a 
security journal available, it also displays the device on which 
the journal file resides. 


' 

' 

' 

' 

' 

' 

; Inputs 
i 

: Outputs 
Non 
' 


tatus, 
tlops : VECTOREnsa$k_evt_length, BYTE); 
ist : vec TORS J, 

! : VECTORE 

i dev_string : VECTORC102; 


- 
a 
e 
< 
~~ 
o 
oO 


' 

See if the user has the SECURITY privilege. 
if NOT .ctl$gq_procpriv(prv$v_security] 

THEN gQa_procp p ” y 


BEGIN 
SIGNAL (ss$_nosecurity); 
RETURN; 


APU HOGS AN IO Ooo I aN eo Soto Ie 


' 
: Get and decode the bits in the alarm vector. 


CHSMOVE (nsa$k_evt_Length, Copy the alarm bits 


BLESRASLSSELSEAREANVLS SSVS ARAN SSSSISAFETISSSLFERE 


a a tk ee a a kk a a a a ed 


SSLEARSNLSS 


_ 
ooo 


a a 2 2a a a 8s 2 a 


' 
1 nsa$gr_alarmvec, ' to program local 
§ flags); ' storage. 
IF CHSEQL (nsa$k_evt_length, ! If no bits are 
4 Lags. ; set, 
95 nsadk_evt 


length, 
UPLIT BYTE(REP nsa$k_evt_length OF (0))) 
THEN shoufurtve_line(sAsci® Security alarms currently disabled’, 


ELSE 
EGIN 
showser teat taatGAse is security alarms currently enabled for:', 


decode bits({ lags) 
showSurite_line ZASCID * *, ZREF(O)); 


SOOOOSOOOSOOOOSOSOSOOCOSOOOSSSOSSSSOSS SDOSCOSSCOCOSOCOOOOSOOOOOOCOOOOOOOOOO 


FARES SSE 


RNOTOPONMONIN 22a 


$251 
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6 
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00 00 4E 4F 49 54 


OnOUS woo Mewn— NAVE WN“ OOONOUE WN 


at td ot I MIOOO 


VEWN OO OONAUNE WN (OCOVNOAUE WOOO 


1986 92:09:86 EEUTUTL®SReSshounuolT-882;1 


! 
} Get and decode the bits in the journal vector. 


CHSMOVE CnsgSh eoouF length, 
ournvec, 


tle ro 
‘IF CHSEOL (nsabk, evt_length, 


Copy the journal bits 
to program local 
storage. 

If no bits are 

set, 


nsadk -§yt 
! yr 118 VHEtR pet nsa$k_evt clength OF (0))) 
i THEN showSwrite_ tre‘ (ZASCID. "Security journaling currently disabled’, 


igLse 
' 
showSwrite ~neaRER (OD) 3 "Security journaling currently enabled for:' 


decode _bits(fl ops? 
showSwrite_ fhe Zascip * * , BREF (OD); 


‘ 
! If there “e sauna bits set, try to find out what device the journal 
is writing t 
! device(0) = ZALLOCATION(dev_string); 
; devicel1) = dev_string; 
; arglist = 1; 
: arglistlij = device 
; status = SCMEXEC(ROUTIN = get_device, 
a ae ARGLST = arglist); 
i THEN showsurite. Line(ZASCID "Journaling file resides on !AS', %REF(device)) 
ELSE SIGNAL (show$_auddeverr, 
: Status); 
: END; 
RETURN; 
END; 
-TITLE SHOWAUDIT 
-IDENT \Vv04-000\ 
-PSECT SPLITS,NOWRT,NOEXE,2 
00 4C 4 AAB: .ASCII \ACL\ 


P. 

P.AAA: .LONG Ve ay 3 
oAgoness e .AAB 

00 00 00 54 4E 55 P.AAD: SCII | \MOUNT\<0><0><0> 

P.AAC: TONG 17694725 

fe 


1 00 

+ 09 
‘ot 
6 ° “ADDRESS P.AAD 

oAAF: “ASCII \AUTHORI ZATION\<0><0><0> 
Sei P.AAE: LONG «12094733 
P.AAH: Ageti SPAM RE\<0> 

: 0 tae 


00 45 52 55 4C 49 
17694 


0 
0 
4 
0 
41 SA 49 52 4F 48 54 3 
4 
0 


-LONG 


Page 


—————_—— 


song 


$ S$ 8 8 


00 00 00 45 44 


00 00 45 52 55 


00 2C 53 53 45 


00 00 00 2C 44 


53 


53 
56 
53 
&G 
52 
56 
4C 
49 
00 
49 
54 
2c 
50 
2c 
45 
52 
ae 
48 


00 


45 


52 


53 


a) 


47 


52 


4) 


48 


1 4 


4) 


55 


48 


55 


4C 


54 


4F 


52 


43 


2c 
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beets a a RT betes oT 
00 90 ' 9 «ADDRESS P.AAH 
43 P.AAJ: .ASCI \suctéss\<0> 
91 af P.AAL: .LONG 17694 
0 4 43) P.AAJ 
53 4 P.AAL: .ASCI \SiSPRY\<0><0> 
91 99 P.AAK: .LONG 17694726 
0 y “ADDRESS P.AAL 
50 4 P.AAN: .ASCI \BYPASS\<0><0> 
01 900 ¢ P.AAM: .LONG 17694726 
0000000' -ADDRESS P.AAN 
47 74 P.AAP: ASCII \UBGRADE \<0> 
01 £00 7C P.AAO: .LONG 1769472 
0 , -ADDRESS P.AAP 
57 4F 44 084 P.AAR: .ASCII \OOUNERADE \<0><0><0> 
010 9009 090 P.AAQ: .LONG 17694729 
0 009" 094 .ADDRESS P.AAR 
50 4 te P.AAT: .ASCII \enereyy<0><0> 
01 909 QAO P.AAS: .LONG 17694726 
0000 9 * OOOA4 -ADDRESS P.AAT 
41 & OOA8 P.AAV: .ASCII VRE AD ALL \<O> 
010 0007 00080 P.AAU: .LONG 176947 
09 0000" 000384 .ADDRESS P.AAV 
45 42 O00B8 P.AAX: ASCII \BREAKIN\<O> 
010£ 000 O0CO P.AAW: .LONG 17694727 
0000000" 000¢4 .ADDRESS P.AAX 
47 4F rt" O0C8 P.AAZ: .ASCII \LOGIN\<0><0><0> 
0106000 Q00D0 P.AAY: .LONG 17694725 
0000000" 00004 .ADDRESS P.AAZ 
47 4F 4C 00008 P.ABB: ASCII \LOGFALLURE\<0><0> 
01060004 QO0E4 P.ABA: .LONG 176947 
0000000" 000E8 -ADDRESS P.ABB 
47 4F 4C OQOOEC P.ABD: ASCII \LOGOUT\<0><0> 
01060006 OO0F4 P.ABC: LONG 17694726 
00000009" OOF8 .ADDRESS P.ABD 
54 41 42 OOOFC P.ABF: ASCII \BATCH \<0><0> 
010€0006 00104 P.ABE: .LONG 17694726 
00000000" 00108 .ADDRESS P.ABF 
41 49 44 0010C P.ABH: ASCII \DIAL UP \<0> 
01060007 0114 P.ABG: .LONG 17694727 
0000000" 00118 -ADDRESS P.ABH 
43 4F 4C OO11C P.ABJ: ASCII \LOCAL \<0><0> 
010 9006 0124 P.ABI: .LONG 17694726 
4D 7 , 53 a 4 P.ABL AoE ESS REMoT \<0> 
010 99 134 P.ABK: .LONG tHE 5e)5> 
0000000" 001 . S P.ABL 
54 45 & 13C P.ABN: ASCII \NETWORK .\ 
91 000 144 P.ABM: .LONG 17694728 
0000000" 00148 .ADDRESS P.ABN 
42 14 P.ABP: .ASCII \SUBPROCESS .\<0> 
o1 0008 13 P.ABO: .LONG 17694731 
0000 13¢ ; ABP 
54 465 44 1 P.ABR: .ASCII AOE TACHED. \<O><0><0> 
019 00 9 16¢ P.ABQ: .LONG 1769472 
0 * 001 -ADDRESS P.ABR 
41 4 174 P.ABT: ‘ASCII \READ \<0><0><0> 
010E00 O17C P.ABS: .LONG 17694725 


74 
-852;1 
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seg 
00 00 2c 
2c 45 54 
00 2c 45 
2c 4C 4F 


72 6 
6 


ro 


REREE 
00 3A 5 


00000000" 
00000000° 00000000° 00000000° 00000000" 


00000000° 00000000' 
00000000* 00000000* 00000000° 00000000° 


00000000° 00000000° 00000000" 


0D 000000006 


00000000" 
00000000° 


0000000° 
0000000" 
00000000" 


00000000° 


2934 


000000006 0 


6 000000006 


00000000' 
00000000' 


0000000° 
0000000° 


00000000° 


4434544 
0000000° 


i 


rene SSB OSTMOOSSSH PS OL L@Sw 
SASESEVSNSFOLS aon ron rol Rom 


POPOPOPOPOPOPONOMOPOPONON 2S 2 SS SS Soe 


SOOoooooooooooeoo 


ooooo 


00000 
0000C 


boost 


0003¢ 


* 00054 


00058 


-Sep-1 
~Sep-1 


ee ee. ee ee 
>Pr> FP FP FP YY 


vv0u vv vv vv UU 
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QO OO @a@w ww 

mo ro <~ fx 
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wow 
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-ADDRESS 
at 


WUALTE ,\<O><0> 

AE fag 

“LONG 176pa7 
RES 


“ASCII 


Ss 

SS P.A 

eASCII \ 7 
-LONG 17694721 
ADDRESS P.AC! 


-PSECT SOWNS,NOEXE,2 


SYS_EVENTS: 


- ADDRESS P.AAA, P.AAC, P.AAE 


FILE EVENTS 


“ADDRESS P. a’ P.AAI, P.AAK, 


P.AAS, P.AAU 


LOGINOUT of VENTS: 


ADDRESS P.AAW, P.AAY, P.ABA, P.ABC 


LOGINOUT. TYPES: 


7ADDRESS P.ABE, P.ABG, P.ABI, 
0, P.ABQ 


ACCESS_TYPES: 


.ADDRESS P.ABS, P.ABU, 
.EXTRN SHOWSURITE _LINE 
-EXTRN STRSAPPEND, CTL$GQ_PROCPRIV 
“EXTRN NSASGR_ALARMVEC 

.PSECT $CODE$,NOWRT,2 

.ENTRY SHOWSAUDIT, Save R2,R3,R4,R5,R6 
HOVAB SHOWSURITE “LINE, R6 

SUBL 


BBS 
MOVZWL ni0ste 
CALLS 


P. ABW, 


cfTLsca, PROCPRIVE4, 1$ 
OS ess iene 


CLIUTL.SRC SHOWAUBIT-B 2:1 


P.ABK, P.ABM, 


P.ABY, P.ACA 


\Security alarms currently disabled\<0> 


P.AAM, P.AAO, - 


$I 
ad vl 

0150. 

0180. 

B18 


0000Vv 


00 
AE 


66 
CF 


66 


; Routine Size: 92 bytes, Routine Base: 


onmovcvo"wonr"o070-oTC7 
Fore £O Oo "oO f-"o 


SCODES + 0000 


Bho 3:08i86 | eet UT SAR SshoukcosT Se: 


#40, NSAS$GR ~fLARAVEC, FLAGS 
#40, FLAGS,” 


(SP) 

PACD 
$ 

(SP) 
Pp 


P.ACF 
#2, SHOWSWRITE_LINE 
#1, DECODE_BITS 
(SP) 


PACH 
#2, SHOWSWRITE_LINE 


aon 


1 l 
SHOWAUDIT Sep-1 AX-11 Bliss-32 v4.0-7 P 11 S 
voe-000 eee ri Poe a Ct ee ta ee) ee a 
ROUTINE decode_bits (flags) : NOVALUE = 

BEGIN 


ee 


Mwy. 


Given a set of bits, determine what security events are set. 


Inputs: 
flags - address of security alarm/journal vector 


Outputs: 


i 
i 
i 
i 
i 
i 
x None. The appropriate events are displayed. 
ie 


P 
flags : REF SBBLOCK; 
BIND 


BLSAFERIS Se 


oo 


$75 = Tlogetnsgrt evt_s Bi ryece 
file_access = fl ags nsa t “evt. fail whos : VECTOR 
log_évent = flags(nsa$b_evt_logb] : VECTOR BYTE); 


i 
—_ 


! 
: Get the system-wide general events 


ince } FROM 0 TO SBITPOSITION(nsa$v_evt_s a’ he 


dO 
F .sysC.i] THEN showSwrite_line(ZASC 'AS', sys_eventsl.i]); 


! 
The loginout events 


INCR i FROM 0 10 3 DO 
IF .log_eventl.j] NEQ 0 
THEN 


BEGIN 
BIND 
login = log_event(.j] : BITVECTOR; 
LOCAL 
desc : sas. pce tdectc.s.bind, 
arglist : VECTOR(2); 
Sinit Fron 6:10"6 6 
INCR 7 FROM O TO 6 bO 


SRENLSSELEAEAN SS SSNSAR 


IF «9 inf.i] 
ee: strSappend(desc, -loginout_typesl.iJ]); 


OO ODDO WOWOO WO NNN NINN NOOO 


y+ 4 o 


PIPIPOPINIPIPIPIPIPYIPINNIPIPIPIPIPIPIPOPUPOPUPPIPUPUPOPURUPUNOPUPOROTD 
A Re ee ay ee tee et tat 
VIEW “OO OVOULS WH" OWOOnou 
RONNIE BEB BE BB BBB BB AIIRPOPONIONPONOPINUIPUNININININITIPUINUPUINIPUPUININUNIN — 


arglist cog taaen, eventsl. 
arglist 
shousur te_ Line CASCID : 'V2<!AS:!>C!AS)", arglist); 


Eno; © 


dong i ~tength) = pOoseh deste Length] © 1; 


1 
! The file access events. 


SGOOSSSOOSCSOSCOOCOCOSOCOCOOOSCOOSOOSOOSCO OOOO OOOCOOO OOOO OOO OOO OOOO OOOOOOO 


WAPOPIPIMPEPOPSNIPPOPO PPP Po PoPufnyofnofny 


FARWV SSeS 


IF NOT .sysCO 
eg OO 
shovbyr tg tinecBascip 7 
E 
fen dyndesc (desc) 
N 
IF .accessl.j] 


arglis 
: 1 


arglist 
showSwr te_ Line CHASCID . 


desc sty: Hite = 


ANNE BES PNM BPN SEES Pron 


WN SO DONO UES WN “OO OONOAUE WN O0@ 


WAAR ROMIPUMININI NINA 2 ee 


28 SE 21 SA 53 41 21 SC 32 «351 4 $8 29 
53 53 45 43 43 41 SF 45 4C 49 46 20 20 


53 41 21 3c 31 31 4 $3 ¢9 


TO ($81 TPOSITIONCarm$y_ fill) = 1) bO 


THEN strSappend(desc, .access_types[.j]); 


-desc(dsc$w_length) -1; 
tle _eventst. 13; — 


SHOWAUD IT 16-5 Sep-1 AX-11 Bliss-32 V4.0-74 
“OOD =300 71382 9}: 48: 3 CLIUTL.SRCJSHOWAUDIT.B 
' 
sys(0} = 0; ' Cheat, use SYS(0) asa flag. 
Tech| Fao 0 10 7 00 Look at e each type of file . 
C ce 
1 - file access{.i] NEQ 0 i If something js set, 
1 N i display the info... 
} BIND” 
1 access = file_access(.i] : BITVECTOR; ! Look at the cell 
1 LOCAL ! as a set of bits. 
1 desc nate Ontaas~ s_bin], 
1 arglist ECTOR 
1 ! If not yet done, 


! print a header. 


ar ag tg 
' Show that header 
' has been written. 

i Se etup a descriptor 

! Go thru each 


FILE_ACCESS:° 


i type; 

$ ang to display 
! Strip trailing comma 
i Get file option 


! and string of occesses 
ITI<!IAS:!>C!AS)", arglist); 


-PSECT SPLITS,NOWRT ,NOEXE ,2 


4 P.ACK: .ASCII nee 
C P.ACJ: .LONG 1re94re 

sADDRESS P.A 
P.ACM: .ASCII \ M2<tAs: !>CLAS)\<0> 
78 P.ACL: .LONG 17694739 
7 »ADDRESS P.ACM 
P.ACO: .ASCII \ FILE_ACCESS:\ 
P.ACN: .LONG 17694736 

-ADDRESS P.ACO 

98 P.ACQ: .ASCII \ ITI<!IAS: !>C!AS)\<0> 
BO P.ACP: 
B4 


-LONG 17694743 
-ADDRESS P.ACQ 


-PSECT S$CODES,NOWRT,2 


P 1 
$251 Yet as 


<w 


— 
seas" 


oc 


f 11 
16-Sep-1984 01:18:57 AX-11 Bliss-32 V4.0-74 P 13 
1o-800-} 382 93:38:32 CLIUTL.SRCJSHOWAUDIT.B32;1 om bs 
O3FC 00000 DECODE_BITS: 
WORD Seve Re R3,R4,RS,R6,R7,RB,RI : 0245 
G 00 MOVAB © STRSAPPEND, R9 : 
F MOVAB SYS_EVENTS, R8& ; 
000000006 MOV SHOOSWRITE.LINE, R7 F 
& SUBL2 #20, SP : 
A 1 MOVL FLAGS, RS + 0264 
‘ 8 A 1 MOVAB BCR ; R6 + 0265 
4 ‘ae v (R5), RG : 66 
2 i) 4 CLAL ' ; 1 
65 E1 6 1% C , (RS), 28 + 0272 
684 OF A PUSHAL SYS_EVENTSLI) ; 
0000" CF 9F D PUSH P.ACJ : 
67 Fe 1 CALLS a2, SHOWSWRITE_LINE : | 
6344 f A 3S ists (4) CR4] : $349 
AE 0200009 H D F MOVL $34471936, DESC + 0287. 
10 AE D4 00047 CLRL = DESC +4 ; 
: D4 A CLAL I ; 0288 
E1 4c 4$ C I, (J)CR4], 5$ + 0290. 
3c AB4 bo 05 PUSHL LOGINOUT_TYPESCI) + 0291. 
10 Ac F 00055 PUSHAB BESC ; 
9 0 FB 00058 CALLS #2, STRSAPPEND ; | 
2 6 F3 00058 S$: AOBLEQ #6, I, 4$ ; 0288 
C Ar B7 0005F DECW —dDESC : 0293 | 
AE C AB4 pO 0006 MOVL LOGINOUT_EVENTSCJJ, ARGLIST : 0294 
AE C AE 9 MOV DESC, ARGLIST+4 + 0295 | 
4 AE 9F 00060 PUS ARGLIST : 0296. 
0000" CF 9F 00070 PUSHAB P.ACL : | 
$7 g FB 00074 CALLS #2, SHOWSWRITE_LINE : 
3 F3 00077 6$: AOBLEQ a. : 077 
65 oi BA BICB2 #1. (RS) ; 0303. 
: D4 0007 Cy > 0304) 
6642 D5 00080 7$: TSTL  (R6)CI) + 0306 | 
48 1 8 BEQL «11 : 
OE 65 € BLBS (RS), 8$ > 0314) 
ge D4 CLRL 3. (SP?) : 0317) 
E BD A PUSHL SP : 
0000" CF 9F C PUSHAB P.ACN : | 
67 é é 0 39 CALL 4G, SHOWSWRITE_LINE ; 
65 8 9 BISB2 #1. (R5) : 0318. 
AE 02060090 F D 96 8S: MOVL  #34471936, DESC : 0320 
1 AE D 9 CLRL —sdDESC +4 ; 
53 D4 OOOA CLRL J ; 0321 
6642 DF O00A3 9$ PUSHAL (R6)C1) : 0323. 
9E 53 £1 O00A6 C J, a(SP)+ 10s : 
58 A&G bp AA PUSHL ACCESS_TYPESCJ) + 0324 
1 Ac F AE PUSHAB DESC : 
69 0 F B CALLS #2, STRSAPPEND ; | 
3 . 7 B4 108 AOBLEQ #4. J, 9$ : 0321. 
c AE B B8 DECW DESC : 6 6 
AE € A842 0 88 MOVL FILE_EVENTSCIJ, ARGLIST : 0327. 
AE C AE 9E 000C MOV DESC; ARGLIST#4 ; 9 s 
4 AE OF C6 PUS ARGLIST ; | 
0000" CF 9F 000C¢ PUSHAB P.ACP : 


—s 


‘a 


vera iESeectgge (4:18:92 AGU SMRSSRMSats7sbo.1 a8 tt 
aC 8 6 FY D008 118: hOBLéo 42. SHOWSURITE LINE : 


3; Routine Size: 213 bytes, Routine Base: SCODES + 005C 


i$ 


1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 


Ps 
MEW —o 


H 11 
1eSep-19be 42:00:86 LeCTUTL SRE SsmowausrT 


i Get the mame of the device to which the security journal is writing. 
i Inputs: 
: desc - address of a descriptor, where to put the device name 


desc - U be filled in with the ASCII string, 


' 

! 

! 

! 

; 

} Outputs: 
he name of the journal file device. 
' 


MAP 
: desc : REF VECTOR; 
{Lore 


} WORD, 
: item, list : SITMLST_DECL(ITEMS=2); 


! Attempt to access the “om device. 
istatus = SASSJNL(CHAN = 


: ACMODE = uti *BYTE( ws exec) 

i FLAGS = cjf$m_read citsm. write, 

' JNLTYP = dt$_atjnl 

i JNLNAM = SASCID > wi ); 

'IF NOT .s ! If the assign failed, 
' THEN RETURN. votetus: ! give up now. 


i Now, using the channel, obtain the name of the device to which 
the journal writes data. 


iSITMLST_ wed ti a = item_list, ' Set up an item List 

' (ITMCOD = cji$_Tildsk sknam, i‘ asking for the device name 
i BUFADR = “dest Fe ' Store it here, 

! BUFSIZ = .des 9 

: RETLEN = descl0J)5; ! and return the Length here. 
‘status = SCE TC IEE = .chan ! Do it. 

: ITMLST = item, List); 


'SDEASJNL(CHAN = .chan); 
oo Status; ' Return the final status. 


7382; 31 


row 


11 
sHouayprt Peers 0: " $2 YANG tT OL tagz82 v4.0c7K2, 


«EXTRN LIBSSIGNAL 


PSECT SUMMARY 
Name Bytes Attributes 
SPLITS 696 NOVEC,NOWRT, RD ,NOEXE, ee LCL, REL, CON,NOPIC,ALIGN(2) 
SOWNS 108 NOVEC, WRT, RD ,NOEXE,NOSHR, LCL, REL, CON,NOPIC,ALIGN(2) 
SCODES 305 NOVEC.NOWRT, RD > EXE-NOSHR, LCL. REL, CON,NOPIC,ALIGN(2) 


Library Statistics 


woocee== Symbols -------- Pages Processing 
File Total Loaded Percent Mapped Time 
-$255$0UA28: CSYSLIBILIB.L32;1 18619 19 0 1000 00:01.8 


COMMAND QUALIFIERS 
BLISS/CHECK=(FIELD, INITIAL OPTIMIZE) /LIS=LIS$:SHOWAUDIT/0BJ=OBJ$:SHOWAUDIT MSRC$:SHOWAUD! T/UPDATE=(ENH$: SHOWAUD IT) 


3; Size: 305 code + 804 data bytes 
3; Run Time 00:10. 
3; Elapsed tteee 00:34. 
3; Lines/CPU Min: 


174 
; Lexemes/CPU-Min: 15519 
; Memory Used: 121 pages 
; Compication Complete 


row 


~ AH-BT13A-SE DIGITAL EQUIPMENT CORPORATION 
VAX/VMS V4.0 CONFIDENTIAL AND PROPRIETARY 


I 


I 
0 


I 
FE 


005 


